$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json) Hash identifier: g6RSLQT1B3tPdZtx0jJD9GUkXOMQzZf16Bv0cT/6YQo= Subject key identifier: C8:E4:47:5E:D2:E2:8C:8D:75:EB:CF:9C:1F:79:5F:FD:40:A9:70:82 Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft Manifest number: 0646 Signing time: Thu 02 May 2024 23:48:36 +0000 Manifest this update: Thu 02 May 2024 23:48:36 +0000 Manifest next update: Thu 09 May 2024 23:48:36 +0000 Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: 0rcr1hTyfEzi7vPjdHGtASVnXlNrubeE5HDGFIIT7SA=) 2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: HDKYcqzQ1+KeIp+18/aWUGSKGmZ8AfbGEy7O86H1f4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Validity Not Before: May 2 23:48:36 2024 GMT Not After : May 9 23:48:36 2024 GMT Subject: CN=66342654-1d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:49:6b:d6:21:80:d8:5c:d5:e3:11:52:62: 7c:96:26:e7:4d:4d:b2:58:3d:16:11:bc:3c:06:3e: fa:de:c5:d2:16:89:3e:d1:dc:bd:09:7a:b7:e3:3c: 4a:64:d1:d7:12:d7:17:56:ab:3d:a4:90:ac:de:be: 08:f5:4f:0d:a1:4b:2a:7d:41:3b:39:7a:16:94:a5: 23:d9:e3:91:63:c7:e3:bc:d8:ce:d4:5b:95:f6:74: 9e:60:5b:6e:e9:09:d3:cf:2e:44:4a:88:a3:75:2c: ff:a3:9e:f6:e4:ab:f7:f4:08:05:c9:87:6d:ab:c9: 9d:6d:49:ac:bc:2f:c5:8d:46:0d:ad:1b:86:fb:56: 18:bc:99:e4:aa:70:46:72:6f:aa:66:bb:9b:0e:2d: fc:75:1b:f6:7e:09:e7:e5:b3:3d:98:b5:ff:2a:a0: 57:b0:52:15:af:7a:76:8d:5f:01:af:d1:24:1e:36: 18:ee:f6:19:6b:b1:87:61:e8:d9:c2:5a:4b:e7:02: be:fa:75:b7:24:2e:c4:86:78:23:ed:f0:ec:59:41: 8f:fa:c3:a5:ea:78:45:49:d6:84:ef:72:7e:2b:d9: c6:9c:f1:c0:00:5f:78:fe:99:6b:62:a4:07:37:ec: c6:1f:ae:35:34:9a:66:64:de:a4:2f:40:c6:14:f8: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E4:47:5E:D2:E2:8C:8D:75:EB:CF:9C:1F:79:5F:FD:40:A9:70:82 X509v3 Authority Key Identifier: keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:05:99:24:1b:5a:28:64:cd:27:34:5f:b5:a0:92:66:73:49: 4e:86:1e:d6:75:74:65:3b:41:5d:c1:55:d4:ee:d7:23:c7:bc: f9:bb:a3:71:d2:a3:2b:dd:36:c8:71:e2:d7:34:2f:78:f3:c9: aa:ec:6b:de:52:04:aa:ab:c8:a6:bb:10:42:f8:d3:25:db:d8: 12:31:28:38:78:06:2b:93:44:0d:cb:c5:e4:01:3a:f7:22:de: ab:d5:40:1b:38:6f:d9:3c:85:ad:45:9c:61:ef:6f:32:40:36: 92:db:bd:0e:7c:a0:1b:9a:4b:e9:13:f4:c1:75:a8:87:b5:9c: 00:57:ef:da:ff:16:ec:6c:aa:da:ed:bd:c0:ad:92:60:85:90: 80:a4:35:8c:7f:1d:5a:f3:06:69:4b:0a:68:3b:a2:de:e8:35: 71:62:8c:66:5e:92:52:6d:7a:ea:ed:42:df:f5:4f:a9:cd:ad: ac:5c:ed:ed:8f:74:50:f1:f1:76:ad:f0:93:11:47:a2:3f:53: 38:16:85:c9:73:19:c1:d6:ac:b8:5f:89:f5:76:41:b2:78:ed: 94:99:d5:7b:53:8b:70:fd:87:ce:fd:41:3c:fc:7a:9b:f1:83: ae:e5:96:10:82:c5:11:11:43:aa:50:67:9d:15:a5:23:7f:86: b0:96:a3:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0 NzBCM0I3QTMwHhcNMjQwNTAyMjM0ODM2WhcNMjQwNTA5MjM0ODM2WjAYMRYwFAYD VQQDEw02NjM0MjY1NC0xZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkpJJa9YhgNhc1eMRUmJ8libnTU2yWD0WEbw8Bj763sXSFok+0dy9CXq34zxK ZNHXEtcXVqs9pJCs3r4I9U8NoUsqfUE7OXoWlKUj2eORY8fjvNjO1FuV9nSeYFtu 6QnTzy5ESoijdSz/o5725Kv39AgFyYdtq8mdbUmsvC/FjUYNrRuG+1YYvJnkqnBG cm+qZrubDi38dRv2fgnn5bM9mLX/KqBXsFIVr3p2jV8Br9EkHjYY7vYZa7GHYejZ wlpL5wK++nW3JC7Ehngj7fDsWUGP+sOl6nhFSdaE73J+K9nGnPHAAF94/plrYqQH N+zGH641NJpmZN6kL0DGFPg0IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjkR17S 4oyNdevPnB95X/1AqXCCMB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZBZkkG1ooZM0nNF+1oJJmc0lOhh7WdXRlO0FdwVXU7tcjx7z5u6Nx 0qMr3TbIceLXNC9488mq7GveUgSqq8imuxBC+NMl29gSMSg4eAYrk0QNy8XkATr3 It6r1UAbOG/ZPIWtRZxh728yQDaS270OfKAbmkvpE/TBdaiHtZwAV+/a/xbsbKra 7b3ArZJghZCApDWMfx1a8wZpSwpoO6Le6DVxYoxmXpJSbXrq7ULf9U+pza2sXO3t j3RQ8fF2rfCTEUeiP1M4FoXJcxnB1qy4X4n1dkGyeO2UmdV7U4tw/YfO/UE8/Hqb 8YOu5ZYQgsUREUOqUGedFaUjf4awlqNS -----END CERTIFICATE-----Generated at Fri May 3 00:28:37 2024 by rpki-client on console-fra.rpki-client.org